Add timeout option for xhr requests (default: 5s)